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DETAILED ACTION 
Continued Examination Under 37 CFR LI 14 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this appUcation is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.1 7(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on September 23, 2005 has been entered. 

Claim Rejections - 35 JJSC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

3. Claims 12, 13, and 15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chopra (Pub. No.: US 2002/0128920 Al) in view of Doyle et al. (Doyle, Patent Number: 
5,838,906). 

As per claim 12, Chopra teaches a system for providing security to a cHent computing system 
operating a browser in communication with an interactive software application maintained by a 
host computing system, said system comprising: 
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at least one processor in the client computing system operable to generate and 
communicate a request to download the interactive software application from the host computing 
system to the client computing system (Chopra page 1 par. 0007); and 

a memory operating in the client computing system to store the interactive software 
application downloaded in response to the download request, said at least one processor 
executing the stored interactive software application and the browser on the client computing 
system (Chopra page 2 par. 0019, and page 3 par. 0024); and 

Chopra fails to expUcitly teach the interactive software application and the browser being 
in communication with at least one element outside the browser operating on the cHent 
computing system when executed and wherein at least one element includes a component of an 
underlying architecture of the client computing system. 

However Doyle discloses an interactive software application/hypermedia in the browser 
provided to user's computer allowing the user to locate and retrieve program objects and interact 
with an other application program located at a remote computer (col. 6 lines 50-col. 7 lines 39 
and col. 16 lines 9-27). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Doyle within the system of Chopra because it 
is well-known for the interactive applications in the browser to communicate outside the browser 
when executed/selected by a user (col. 6 lines 50-col. 7 Unes 39 and col. 16 lines 9-27). One 
would have been motivated to do so because it would allow communicating with other 
application and providing data. 
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As per claim 13 Chopra and Doyle teach all the subject matter as described above. In addition 
Chopra teaches the method/system, wherein the communication includes issuing and receiving 
events (Chopra page 1 par. 0007). 

As per claim 15 Chopra and Doyle teach all the subject matter as described above. In addition 
Chopra teaches the method/system, wherein the interactive software application is a Java applet 
(Chopra page 6 claim 36). 

4. Claims 1-1 1, 14, and 16-26 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Chopra (Pub. No,: US 2002/0128920 Al) in view of Doyle et al (Doyle, Patent Number: 
5,838,906), and Brownell (Pub. No.: US 2002/0169980 Al). 

As per claims 1 and 26 Chopra teaches a method for providing security to a client computing 
system in communication with a host communication system across a network, said method 
comprising: 

executing a browser on the client computing system (Chopra page 2 par. 0019); 

communicating from the client to the host computing system (Chopra Fig. 1 No. 102 & 
106), a request to download data to be displayed in the browser (Chopra page 1 par. 0007); 

downloading the data from the host computing system to the client 
computing system (Chopra page 3 par. 0024); 

loading an interactive software application in the browser, the interactive 
software application utilizing the data downloaded from the host computing system (Chopra 
page 3 par. 0024); and 
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executing the interactive software application in the browser on the cUent computing 
system, the interactive software appHcation being in communication with at least one element on 
the client side (Chopra page 2 par. 0019, and page 3 par. 0024); 

Chopra does not explicitly teach client side firewall. 

However Brownell discloses client side firewall (Brownell Page 5 par. 0056). 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Brownell within the system of Chopra 
because it would allow to specify that network traffic from one source be blocked, network 
traffic from another source be rerouted to another network, user profile data and data available 
through user authentication service (Brownell page 5 par. 0056). 

Chopra and Brownell fail to explicitly teach the interactive software application and the 
browser being in communication with at least one element outside the browser operating on the 
client computing system when executed and wherein at least one element includes a component 
of an underlying architecture of the client computing system. 

However Doyle discloses an interactive software apphcation/hypermedia in the browser 
provided to user's computer allowing the user to locate and retrieve program objects and interact 
with an other appUcation program located at a remote computer (col. 6 lines 50-col. 7 hnes 39 
and col. 16 lines 9-27). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Doyle within the combination system of 
Chopra and Brownell because it is well-known for the interactive applications in the browser to 
communicate outside the browser when executed/selected by a user (col. 6 lines 50-col. 7 lines 
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39 and col. 16 lines 9-27). One would have been motivated to do so because it would allow 
communicating with other application and providing data. 

As per claim 1 9 Chopra teaches a method for providing security to a client computing system 
operating an interactive software application, said method comprising: 

loading the interactive software application on the client computing system (Chopra page 
3 par. 0024); 

executing the interactive software application in a browser on the client computing 
system (Chopra page 1 par. [0006-0007], and page 3 par. 0024); and 

communicating data between the at least one element and browser on the client 
computing system (Chopra page 2 par. 0019, and page 3 par. 0024); 

Chopra does not disclose communicating a digital signature to the browser; 

verifying the digital signature; 

upon confirmation of the digital signature, opening a port of the browser for receiving 
data from at least one element; 

However Brown teaches communicating a digital signature to the browser (Brownell 
page 6 par. 0072 and page 4 par. [0050-0054]); 

verifying the digital signature (Brownell page 6 par. 0075 and page 4 par. [0050-0054]); 

upon confirmation of the digital signature, opening a port of the browser for receiving 
data from at least one element (Brownell page 6 par. 0072 and page 4 par. [0050-0054]); 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Brownell within the system of Chopra 
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because it would allow to authenticate and verify a user to further improve security (Brownell 
page 6 par. 0072). 

Chopra and Brownell fail to explicitly teach communication data with at least one 
element outside the browser operating on the client computing system when executed and 
wherein at least one element includes a component of an underlying architecture of the client 
computing system. 

However Doyle discloses an interactive software appUcation/hypermedia in the browser 
provided to user's computer allowing the user to locate and retrieve program objects and interact 
with an other application program located at a remote computer (col. 6 hnes 50-col. 7 lines 39 
and col. 16 Hnes 9-27). 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Doyle within the combination system of 
Chopra and Brownell because it is well-known for the interactive applications in the browser to 
communicate outside the browser when executed/selected by a user (col. 6 lines 50-col. 7 lines 
39 and col. 16 lines 9-27). One would have been motivated to do so because it would allow 
communicating with other application and providing data. 

As per claim 2 Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method/system, wherein the communication includes issuing and 
receiving events (Chopra page 1 par. 0007). 
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As per claims 3 and 14 Chopra, Brownell and Doyle teach all the subject matter as described 
above. In addition, teaches the method/system, wherein the at least one element includes at least 
one of a browser and an element of an underlying architecture (Chopra page 2 par. 0019, and 
Brownell page 4 par. 0050). 

As per claims 4, and 5 Chopra, Brownell and Doyle teach all the subject matter as described 
above. In addition Chopra teaches the method/system, wherein the interactive software 
application is a Java applet (Chopra page 6 claim 36). 

As per claims 6, 16 and 22 Chopra, Brownell and Doyle teach all the subject matter as described 
above. In addition Brownell teaches the method/system, wherein the communication commences 
after verification of a digital signature, digital signature associated with the host (Brownell page 
6 par. 0072 & 0075). The rational for combining are the same as claim 19 above. 

As per claim 7 Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Brownell teaches the method/system, fijrther comprising: 

reading a digital signature (Brownell page 6 par. 0072 and page 4 par. [0050-0054]); 

verifying the digital signature (Brownell page 6 par. 0075 and page 4 par. [0050-0054]); 

and 

opening a port of the browser to receive events from the at least one element (Brownell 
page 6 par. 0072 and page 4 par. [0050-0054]). The rational for combining are the same as claim 
19 above. 
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As per claims 8 and 17 Chopra, Brownell and Doyle teach all the subject matter as described 
above. In addition, the method/system, wherein the data includes a model representative of an 
underlying architecture of a software system (Chopra page 3 par. 0024, and Brownell page 4 par. 
0050). 

As per claim 9, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the browser operates a graphical user interface to 
display data communicated by the at least one element (Chopra page 2 par. 0017). 

As per claim 10, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the data includes content and 
format information (Chopra page 3 par. 0024). 

As per claims 11, 18, and 25, Chopra, Brownell and Doyle teach all the subject matter as 
described above. In addition, the method/system, wherein the browser is a web browser (Chopra 
page 2 par. 0019, and Brownell page 4 par. 0050). 

As per claim 20, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the data includes at least one 
of events and requests (Chopra page 1 par. [0006-0007]). 
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As per claim 21, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the events and requests utilize the HTTP protocol 
(Chopra page 2 par. 001 9), 

As per claim 23, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Chopra teaches the method, wherein the at least one element is at 
least one of a second browser and component of an underlying architecture (Chopra page 3 par. 
0024, and Brownell page 4 par. 0050). 

As per claim 24, Chopra, Brownell and Doyle teach all the subject matter as described above. In 
addition Brownell teaches the method, wherein the at least one element operates on the client 
side of a client firewall (Brownell page 5 par. 0056). The rational for combining is the same as 
claim 19 above. 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A. Shiferaw whose telephone number is 571-272-3867. 
The examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 






